Roles on

Role Refresh Modes

Mon, 01 Jan 0001 00:00:00 +0000

The Member Sources that you have configured will change over time, as users and groups are added and removed. You can control how those changes are deployed to the Policy by choosing your preferred Refresh Mode.

The following three refresh modes are supported for the Roles:

Manual Mode
In Manual Mode, you manually synchronize the Role members and manually deploy the Policy. For more information on synchronizing members, please refer to the section Managing Members in a Role.

Managing Members in a Role

Mon, 01 Jan 0001 00:00:00 +0000

Note: The ID column in the Members tab displays the unique identifier for the Azure AD, Posix LDAP and Active Directory member sources.

The following actions are available within the Members section of a Role.

Task Name	Steps
Synchronize Members	1. Select the role you want to update by clicking on it in the ESA Web UI, under Policy Management > Roles & Member Sources > Roles. The selected role screen appears. 2. In the Members tab, click the Synchronize Members icon in the Action column. A status message appears.
List Group Members	1. Select the role you want to update by clicking on it in the ESA Web UI, under Policy Management > Roles & Member Sources > Roles. The selected role screen appears. 2. In the Members tab, click the List Group Members icon in the Action column. The dialog box appears with the list of all members in the group.
Remove Members	1. Select the role you want to update by clicking on it in the ESA Web UI, under Policy Management > Roles & Member Sources > Roles. The selected role screen appears. 2. In the Members tab, click the Remove icon in the Action column. A confirmation dialog box appears. 3. Click Ok.

Searching Members

Mon, 01 Jan 0001 00:00:00 +0000

The Search Member tab from the Roles & Member Sources screen enables you to search for members within configured Roles. It provides additional information about the users, such as their added time, member source, and associated roles.

To search a member:

On the ESA Web UI, navigate to Policy Management > Roles & Member Source > Search Member.
Enter the search criteria in the Member Name textbox.

For more on valid search criteria, refer to Search Criteria.

Searching Member Access

Mon, 01 Jan 0001 00:00:00 +0000

The Search Member Access tab on the Roles & Member Sources screen enables you to check effective permissions for a user. This can be done if a user is assigned a role and that role is linked to policies. It provides additional information about effective permissions for a user on data elements mapped in policies. It will also show permissions for each policy and the final permission when multiple policies are connected to the datastore.